Accelerating Connectivity While Shielding Corporate Data
Microsoft's Internet Security and Acceleration Server (ISA) provides secure, fast, and manageable Internet connectivity. The Henson Group, Inc. (THG) boasts a consultancy practice that specializes in ISA server configuration, including multi-layer enterprise security and scalable high-performance Web caching. THG also extends ISA for Microsoft's Windows 2000 Server and Windows Server 2003 for policy-based security, acceleration, and management of internetworking.
Guiding clients, THG's expert knowledge encompasses the following ISA Server prowess:
Deployment Planning: THG offers specific advice to the client on implementing the logical design of the solution, which takes into account a multitude of factors, including server configuration and placement, system lockdown, cache array, and administration.
Acceleration and Caching: THG offers the client several suggestions for accelerating access to popular Web content and SSL connections.
Firewall: THG assists in configuring the the firewall services within ISA Server to provide substantial network protection; detect and react upon an intrusion; and facilitate operational requirements, such as Virtual Private Network tunneling and bandwidth rules.
VPN: ISA Server takes advantage of Windows Server’s built-in support for Virtual Private Networking. Windows supports VPN connections based upon PPTP or a combination of L2TP and IPSec. THG configures VPN through ISA Server to provide both a secure connection over a public network and a secure remote access connection from a client across a public network.
Active Directory: THG provides details on integration issues and requirements for the Active Directory service in Windows 2000 Server and Windows Server 2003.
Upgrading and Coexistence: THG gives the client multiple upgrade strategies, as well as numerous Best Practice suggestions for managing coexistence and migration issues.
Client Issues: THG helps the client weigh numerous variables that come into play in selecting deployment methods, such as ISA's firewall client.
Security: THG designs configurations for the effective monitoring and securing of outbound access for internal clients.
Reverse Proxy: THG provides ample options for securely publishing Web sites and other resources, both internally and for the Internet.
Intrusion Detection: THG advises the client on proper intrusion detection configurations, while also detailing specific alerts for port scan, IP half scan, land attack, ping of death, UDP bomb, and Windows Out-of-Band.
Management and Control: THG enables detailed alerting so system administrators can resolve issues before outages occur.